Backage

Name: Backage
Aliases: BackDoor.HC, VC,
Ports: 334, 411, 5333
Files: Backage.3.zip - 140,409 bytes Backage3.0.zip - 140,228 bytes Backage3.0.zip - 140,778 bytes Backage3.0.1.zip - 155,646 bytes Backage3.0.1.zip - 156,192 bytes Backage3.1.zip - 187,194 bytes Backage3.1.zip - 188,374 bytes Backage3.1.1.zip - 220,682 bytes Backage3.1.1.zip - 221,862 bytes Backageserver3.1a.zip - 35,368 bytes Backage3.2seb.zip - 120,198 bytes Backage_3_1.exe - 255,072 bytes Backage 3.2 se.exe - 93 3,888 bytes Backageclient.exe - 315,904 bytes Backageclient.exe - 339,456 bytes Backageclient.exe - 630,784 bytes Backageserver.exe - 98,816 bytes Backageserver.exe - 114,688 bytes Backageserver.exe - 118,784 bytes Backageserver.exe - 120,320 bytes Backageserver2.exe - 118,784 bytes Server.exe - Desintall.exe - 37,888 bytes Desintall.exe - 65,536 bytes Winstop32.exe - Mskernel16.exe - Edit server.exe - 69,632 bytes Backage32se.bagage - 812 bytes Backage3.ini - 879 bytes Skin.ini - 632 bytes Makeskinz.exe - 217,088 bytes V.exe - Vc.exe - Msinet.ocx - Mswinsck.dll - Vbzip10.dll - - 172,681 bytes
Created: July 2000
Requires:
Actions: Remote Access
Registers: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\
HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Run\
HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce\
HKEY_USERS\.Default\Software\Win\Run\
Notes: Works on Windows 95, 98 and ME.
Country: written in France
Program: Written in Visual Basic 5.0 and 6.0.
© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>